CVE-2007-3853: CVE-2007-3853

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-3853

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1) DBMS_JAVA_TEST in the JavaVM component (DB01), (2) Oracle Text component (DB09), and (3) MDSYS.SDO_GEOR_INT in the Spatial component (DB15). NOTE: a reliable researcher claims that DB01 is SQL injection in DBMS_PRVTAQIS.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

Oracle Database 多个未明安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Oracle Database是一款商业性质大型数据库系统。 Oracle Database 存在多个未明安全漏洞，远程远程认证用户可以通过多个组件获得未知影响： (1) DBMS_JAVA_TEST组件JavaVM(DB01), (2) 组件Oracle Text(DB09), (3) MDSYS.SDO_GEOR_INT组件Spatial(DB15). DBMS_PRVTAQIS 软件包中存在SQL注入漏洞。攻击者可以通过设置了错误权限的特制视图执行升级、删除、插入等操作，有可能导致权限提升。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2007-3853

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2007-3853

Please Login to view more intelligence information

http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_prvtaqis.htmlx_refsource_MISC
http://www.red-database-security.com/advisory/oracle_cpu_jul_2007.htmlx_refsource_MISC
http://www.oracle.com/technetwork/topics/security/cpujul2007-087014.htmlx_refsource_CONFIRM
http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_July_2007_Analysis.pdfx_refsource_MISC
http://secunia.com/advisories/26114third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26166third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1018415vdb-entryx_refsource_SECTRACK
http://www.us-cert.gov/cas/techalerts/TA07-200A.htmlthird-party-advisoryx_refsource_CERT
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00727143vendor-advisoryx_refsource_HP
http://www.vupen.com/english/advisories/2007/2635vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/2562vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/35490vdb-entryx_refsource_XF
http://www.securityfocus.com/archive/1/474000mailing-listx_refsource_BUGTRAQ
https://nvd.nist.gov/vuln/detail/CVE-2007-3853

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2007-3853

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2007-3853

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2007-3853

III. Intelligence Information for CVE-2007-3853

IV. Related Vulnerabilities

V. Comments for CVE-2007-3853

Leave a comment